|
 The
risk assessment itself will be completed when the risk manager
has sufficient information to make a defensible decision.
|
Iteration is a normal component of risk assessment. However, unnecessary
iteration is a poor use of resources. Tiered assessments build in
reevaluation steps at the beginning and can be used to fine-tune
the analysis.
Another way to prevent unnecessary iteration is up-front planning.
Make sure to clearly define what completion means. Remember
that the risk assessment is decision-driven. You're not doing basic
research here: The information gathered should be just enough to
make this decision — no less and, ideally, no more.
|
Avoiding Unnecessary Iteration